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Description 

BACKGROUND OF THE INVENTION 

[0001] This invention relates generally to personal s 
identification or verification systems and, more particu- 
larly, to systems that automatically verify a person's 
identity before granting access to a secured area of a 
company building, or to a secured machine of some 
kind, such as a bank automatic teller machine (ATM). 10 
For building access, employees are typically required to 
wear or carry identification badges, which are either in- 
spected by security guards or are read by machines in- 
stalled at access doors. Access to some areas of build- 
ings may also require the employee to key in a lock com- 1 5 
bination, or supply a secret password. 
[0002] Access to an ATM also requires an identifica- 
tion card, which is scanned by the machine to determine 
the identity of the customer who was issued the card. In " 
an effort to ensure that the person presenting the card 20 
is the customer to whom it was issued, a personal iden- 
tification number (PI N) must also be entered into the ma- 
chine. Access to highly secured computer systems 
presents similar problems and usually requires some 
form of identification used in conjunction with a secret 25 
code number or password. 

[0003] The principal weakness of systems of the gen- 
eral type described above is that identification cards 
may be lost or stolen, and secret codes may be stolen, 
guessed or determined by trial and error Accordingly, 30 
there has been a trend toward systems that obviate the 
need to carry identification cards or to memorize secret 
codes or passwords. 

[0004] Fingerprint matching falls into this category 
and has been used or proposed for building access, but 35 
has not been widely adopted because of the need for 
relatively expensive computer equipment to perform the 
matching process to a desired level of precision. In the 
past, fingerprint matching systems have been relatively 
slow. Even with the availability of high-speed computer 40 
processors, a fingerprint matching system that must 
compare a sensed fingerprint image with many possible 
stored reference images will not operate fast enough to 
provide rapid access to a building. 

[0005] Accordingly, the need still exists for a system « 
of building and machine access that avoids the pitfalls 
of the prior art techniques. The present invention satis- 
fies this need. 

[0006] US-4,995,086 discloses an arrangement and 
procedure for determining the authorization of individu- 
als by verifying their fingerprints. In particular, a portable 
data carrier is used which stores fingerprint data of a 
user of the data carrier. Means for storing fingerprint da- 
ta of several user are explicitly avoided. As a result, for 
verifying the authorization of an individual, respective 55 
fingerprint data are retrieved from the portable data car- 
rier only and compared with fingerprint data obtained by 
means of a fingerprint sensor. 



[0007] EP 0 393 784 A1 discloses a multifunctional 
identification and information card and a system to be 
used therewith for exchanging a data with a data acqui- 
sition system. The use of fingerprint data and the like 
are not disclosed therein. 

SUMMARY OF THE INVENTION 

[0008] The present invention resides in a combination i\) 
of fingerprint matching and a carried form of personal 
identification, for access to buildings or machines suchl 
as automatic teller machines (ATMs). Briefly, and in gen- 
eral terms, the system of the invention comprises means 
for inputting a preliminary identification of a user of the 
system; a fingerprint database containing reference fin- 
gerprint data for every user of the system, in association 
with an identification of the user; means for retrieving 
from the fingerprint database reference fingerprint data 
corresponding to the preliminary identification of -the us- 
er; a fingerprint sensor for generating a fingerprint image 
of the user prior to granting access; and a fingerprint 
correlator for comparing the subject fingerprint image 
with the retrieved reference fingerprint data, and gener- 
ating a match signal if there is a match to within a desired 
degree of accuracy. The match signal is used to grant 
the user access to the door or machine. 
[0009] In one embodiment of the invention, the means 
for inputting a preliminary identification includes means 
for reading an identification medium carried by each us- 
er and having a transponder capable of transmitting 
identification data in response to receipt of a polling sig- 
nal; and a polling transceiver for sending polling signals 
periodically and receiving any response signals from a 
transponder carried by a user approaching the secured 
building or machine. In another embodiment, the iden- 
tification medium carried by each user includes a ma- 
chine readable card; and the means for reading the 
identification medium includes a card reader capable of 
reading the machine readable card to extract prelimi- 
nary identification data. 

[0010] As used to provide access to a secured build- 
ing, the system further comprises a door release actu- 
ator triggered by the match signal. Preferably, the fin- 
gerprint sensor is integrated into the door for conven- 
ience of use. 

[001 1] As used to provide access to a bank automatic 
teller machine (ATM), the system's means for reading 
an identification medium includes a bank card reader 
integral with the ATM. The fingerprint sensor is also in- 
tegrated into the ATM. 

[0012] The invention may also be defined in terms of 
a method for controlling access to a secured building or 
machine, comprising the steps of reading preliminary 
identification data supplied by a user seeking access; 
sensing the user's fingerprint prior to granting access, 
and generating a fingerprint image; retrieving from a fin- 
gerprint database reference fingerprint data corre- 
sponding to the preliminary identification data; compar- 
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ing the reference fingerprint data with the subject finger- 
print image to verify the preliminary identification data 
and, if there is match, generating a match signal; and 
granting access to the secured building or machine if a 
match signal is generated. 

[0013] In a preferred form of the method, the identifi- 
cation medium carried by each user includes a trans- 
ponder, and the step of reading preliminary identification 
data includes transmitting a polling signal, receiving the 
polling signal in the transponder, and transmitting from 
the transponder a reply that includes user identification 
data. In an alternative form of the method, the identifi- 
cation medium carried by each user includes a machine- 
readable card, and the step of reading data from an 
identification medium includes reading data from a card 
reader in which the machine-readable card is placed by 
the user. If the machine-readable card is a "smart card," 
it may hold its own reference fingerprint data as well as 
preliminary identification data. 

[0014] As used to provide access to a protected build- 
ing, the method of granting access includes unlocking 
a door to the building, and the step of sensing the user's 
fingerprint is performed by a sensor integrated into the 
door for convenience of use. As used to provide access 
to a machine, the method step of reading data from an 
identification medium includes reading an identity card 
in the machine. 

[0015] It will be appreciated from the foregoing sum- 
mary that the present invention represents a significant 
advance in techniques for controlling access to secured 
buildings and machines. In particular, the invention pro- 
vides a high level of security because of its use of fin- 
gerprint matching, but does not sacrifice speed or con- 
venience of operation because preliminary identification 
is provided by the user and fingerprint matching can, 
therefore, be achieved rapidly. In the preferred form of 
the invention as used for building access, the combina- 
tion of fingerprint matching and radiofrequency identifi- 
cation transponders allows users to pass rapidly 
through a controlled door by simply placing a finger mo- 
mentarily on a sensor that can be integrated into the 
door structure. Other aspects and advantages of the in- 
vention will become apparent from the following more 
detailed description, taken in conjunction with the ac- 
companying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0016] 

FIG. 1 is diagrammatic view showing one technique 
for obtaining access to a secured building in accord- 
ance with the present invention; 
FIG. 2 is a block diagram showing the principal com- 
ponents of the invention as used in the technique 
shown in FIG. 1; 

FIG. 3 is a block diagram similar to FIG. 2, but as 
used for access to an automatic teller machine 



(ATM) or other machine; and 
FIG. 4 is a block diagram showing a fingerprint en- 
rollment process as used in either of the systems of 
FIGS. 2 and 3. 

5 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0017] As shown in the drawings for purposes of illus- 

10 tration, the present invention pertains to a system for 
controlling access to secured building or machines. In 
the past, the use of identification cards or badges, in 
possible combination with secret codes or passwords, 
has not been reliable because of the possibility of theft 

15 of the cards and codes. 

[0018] In accordance with the present invention, a 
high-speed fingerprint matching device is used in con- 
junction with a personal identification medium carried by 
each user seeking access to a building or machine. The 

20 personal identification medium provides a preliminary 
identity of the user and the fingerprint matching device 
provides rapid verification or confirmation of the identity. 
[0019] FIG. 1 shows auser, indicated by reference nu- 
meral 10, approaching a door 12 to a secured building. 

25 An access control unit 14 is installed near the door 12 
and includes an integral fingerprint sensor 16. The user 
10 is shown wearing an identification badge 18. In ac- 
cordance with a preferred embodiment of the invention, 
the access control unit 14 transmits polling signals, in- 

30 dicated by line 20, and the badge 1 8 includes an integral 
transponder, which receives the polling signals and 
transmits a response that includes a coded employee 
number or, more generally, a user number, as indicated 
by line 22. 

35 [0020] When the user 10 reaches the door, he or she 
places a finger on the fingerprint sensor 16. An alterna- 
tive location for the sensor is, as indicated at 16\ integral 
a push plate 24 on an inwardly opening door, or beneath 
a pull handle (not shown) on an outwardly opening door. 

40 The user has only to pause a fraction of a second while 
fingerprint verification takes place. Then the access 
control unit 14 sends a control signal over line 28 to a 
door release actuator 30, which unlocks the door 12 and 
allows the user 10 to enter. The access control unit 14 

45 also includes an integral card reader 32, for use by those 
that do not have a transponder badge 28, or whose 
badge is not working for some reason. Transponder 
badge technology, sometimes known as RF-ID (radio- 
frequency identification), has been discussed in the 

50 technical literature. 

[0021] An alternative to the use of a badge 28 is to 
have each user 10 enter an identification code in a key- 
pad (not shown) near the door 1 2. The preliminary iden- 
tification is, in effect, memorized and supplied by the us- 

55 er 10 instead of being stored in the badge 28. Verifica- 
tion is still performed by fingerprint matching. 
[0022] FIG. 2 shows the principal components of the 
access control unit 14 In block diagram form, Including 



3 



5 



EP 0 924 655 B1 



6 



an identification polling transceiver 40, a door controller 
42, a fingerprint database 44, and a fingerprint correlator 
46. The polling transceiver 40 continually transmits poll- 
ing signals, indicated by line 20. As the user 10 ap- 
proaches, his or her badge 18 detects the polling signal 5 
and transmits a reply signal that includes the user's 
identification number or user number, as indicated by 
line 22. The user number is forwarded to the door con- 
troller 42, over line 48, and, as indicated by line 50, is 
used to access the fingerprint database 44. The data- 10 
base is basically a table that associates each user 
number with a stored fingerprint image, or with selected 
distinctive attributes or features of the user's fingerprint 
image. The database may also contain other informa- 
tion about the user, such as a history of access to the 15 
door 12, but only the user's stored fingerprint image is 
of concern to the invention. In case multiple users ap- 
proach the door simultaneously, means must be provid- 
ed to prevent "interference between the signals from 
each transponder, and to select the fingerprint of the 20 
person who will next try to enter the door 12. This can 
be achieved simply by limiting the transmitted signal 
strength of the polling transceiver 40 and badge trans- 
ponders 18, so that the exchange of signals between 
transponder and transceiver occurs only when they are 25 
in close proximity. Alternatively or additionally, standard 
signal multiplexing techniques (based on time, frequen- 
cy or modulation diversity) could be used to eliminate 
interference, and the strength of the transponder signal 
received at the transceiver could be used to select the 30 
closest transponder. 

[0023] At about the same time that the door controller 
42 retrieves a reference fingerprint from the database 
44, the controller also issues a "start" command to the 
fingerprint correlator 46, as indicated by line 52. The fin- 35 
gerprint sensor 16 is activated and scans the user's fin- 
gerprint. The correlator 46 then rapidly compares the 
subject fingerprint from the sensor 16, received over line 
54, with the reference fingerprint features received from 
the database 44 over line 56. If the correlator 46 deter- 40 
mines that there is a match, a match signal is transmitted 
to the door controller 42 over line 58, and the controller 
generates an "open" signal on line 28 to the door release 
actuator 30. 

[0024] Like most automated secured entry systems, 45 
the invention does not prevent the practice of "tailgat- 
ing," where another person follows the one who has 
been authorized to enter the doorway. This problem can 
be addressed in other ways, such as by sounding an 
alarm upon the detection of multiple entries, using pho- 50 
to-detectors or similar devices. 

[0025] The fingerprint correlator 46 performs the 
matching function very rapidly by using special-purpose 
hardware in the form of an application-specific integrat- 
ed circuit (ASIC), which employs a high degree of par- 55 
allel processing to search an entire fingerprint image for 
instances of distinctive reference features that have 
been previously stored in the fingerprint database 44. A 



specific form of the fingerprint correlator that can 
achieve the desired speed of matching is disclosed in a 
patent application by Bruce W. Evans et al., entitled 
"Fingerprint Feature Correlator," filed concurrently with 
this application. The Evans et al. patent application is 
hereby incorporated by reference into this specification. 
A correlator constructed in accordance with the princi- 
ples described in the Evans et al. specification is capa- , 
ble of verifying a user's identity in less than a second, * 
and closer to half a second if only one reference finger- 
print image has to be compared with a sensed finger- 
print image 

[0026] FIG. 3 is a diagram similar to FIG. 2, but show- 
ing the principal components of a system used to access 
a computer 60, such as a bank automatic teller machine 
(ATM). Instead of the door controller 42, the correspond- 
ing component in FIG. 3 is an access controller 42', and 
instead of the polling transceiver 40 this system has a 
bank card reader 62 or a similar device for reading some 
type of identification card. The card may be encoded 
with data using a magnetic stripe, bar codes, or any oth- 
er means. Alternatively, the card may be a "smart card" 
that includes an electronically readable memory. The 
user places his or her card in the reader 62, which re- 
trieves an account number or other type of identification 
unique to the user, and passes this data to the access 
controller 42' over line 48. As in the door entry system 
of FIG. 2, the access controller 42' uses the account 
number, on line 50, to access the fingerprint database 
44 and obtain a user reference fingerprint on line 56 from 
the database. The controller 42' also sends a "start" sig- 
nal on line 58 to the fingerprint correlator 46, which com- 
pares the reference fingerprint with a subject fingerprint 
image supplied from the sensor 16 over line 54. If the 
correlator 46 finds a match, the correlator sends a signal 
over line 58 to the access controller 42', which transmits 
an appropriate signal to the computer 60 on line 28, in- 
dicating that access has been granted. In the case of an 
ATM machine, the computer 60 initiates a dialog with 
the user, who may then conduct banking transactions, 
such as cash withdrawal or deposit transactions. If the 
computer 60 is for some non-banking purpose, the grant 
of access may be for any defined purpose, such as the 
authorization to read from or write to files under control 
of the computer. 

[0027] In the machine access application of the inven- 
tion, the use of fingerprint matching in conjunction with 
a conventional bank card or other identification card pro- 
vides a higher level of security without the need to mem- 
orize secret codes or passwords. Door or building ac- 
cess using the technique of the invention has the same 
general advantage: a higher level of security, without the 
need for secret codes or passwords, and yet without 
sacrificing speed or convenience or access. When used 
in conjunction with automatic badge sensing systems, 
like RF-ID, the invention provides high security with vir- 
tually no inconvenience or delay to the user. If "smart 
card" technology is used for door or machine access, 
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the card may also be used to store fingerprint reference 
data for the user. Fingerprint matching at the door or 
machine would then match the sensed fingerprint image 
with fingerprint reference data read from the user's card. 
The need to maintain potentially large fingerprint data- 
bases at the door would then be avoided. 
[0028] FIG. 4 illustrates an enrollment procedure that 
is required for any of the configurations described 
above. It has been assumed in the foregoing description 
that the fingerprint database 44 contains reference fin- 
gerprint image data for each user, employee, or custom- 
er using the system, and that the reference fingerprint 
data are associated with corresponding user numbers, 
or employee or customer account numbers. The enroll- 
ment procedure requires that each user enroll by pre- 
senting a finger to the fingerprint sensor 16, which gen- 
erates a fingerprint image for a fingerprint enrollment an- 
alyzer 64. At the same time, the user's identity has to be 
independently verified; by some means other than fin- 
gerprint matching, as indicated in block 66, and the user 
also presents an account number, employee number or 
similar identity number. If the user does not have such 
a number, one is assigned at this stage. The account 
number is stored in the database 44 in association with 
the user's fingerprint image data. The fingerprint corre- 
lator 46 described in the patent specification of Bruce 
W. Evans et al. referred to above, also includes an anal- 
ysis section that extracts distinctive features from a fin- 
gerprint image, in the form of reference "patches" of the 
image that contain one or more distinctive bifurcations 
of ridges or valleys in the fingerprint image. In the sys- 
tem of the present invention, it is these reference patch- 
es, and their positions, that are stored in the fingerprint 
database 44, or directly on the user's identification card, 
if "smart card" technology is used, for later retrieval and 
use in the correlator 46. 

[0029] It will be appreciated from the foregoing that 
the present invention represents a significant advance 
in the field of automatic security systems controlling ac- 
cess to buildings or machines. In particular, the combi- 
nation of an identity medium, such as a badge or card, 
to identify the user, and fingerprint matching to verify the 
identity, results in a highly secure but highly convenient 
approach to access control. It will also be appreciated 
that, although specific embodiments of the invention 
have been described In detail for purposes of illustration, 
various modifications may be made. Accordingly, the in- 
vention should not be limited except as by the appended 
claims. 



Claims 

1. A system for controlling access to a secured build- 
ing or machine, the apparatus comprising: 

means for inputting a preliminary identification 
of a user (10) of the system; 



a fingerprint database (44) containing refer- 
ence fingerprint data for every user of the sys- 
tem, in association with an identification of the 
user (10); 

5 means for retrieving from the fingerprint data- 

base (44) reference fingerprint data (56) corre- 
sponding to the preliminary identification of the 
user (10); 

a fingerprint sensor 16 for generating a subject 
10 fingerprint of the user (10) prior to granting ac- 

cess; and 

a fingerprint correlator (46) for comparing the 
subject fingerprint image (54) with the 
retrieved reference fingerprint data (56), and 
15 generating a match signal (58) if there is a 

match to within a desired degree of accuracy; 

wherein the match signal (58) is used to grant 
access (28) to the door or machine. 

20 

2. A system as defined in claim 1 , wherein: 

the means for inputting a preliminary identifica- 
tion includes means for reading an identifica- 
25 tion medium carried by each user and having a 

transponder capable of transmitting identifica- 
tion data in response to receipt of a polling sig- 
nal; and 

the means for reading an identification medium 
30 includes a polling transceiver (40) for sending 

polling signals periodically and receiving any 
response signals from a transponder (18) car- 
ried by a user approaching the secured building 
or machine. 

35 

3. A system as defined in claim 1 , wherein: 

each user carries a machine readable card; and 
the means for Inputting a preliminary identifica- 
40 tion includes a card reader (32) capable of 

reading the machine readable card to extract 
preliminary identification data. 

4. A system as defined in claim 1 , wherein: 

45 

the system provides access to a secured build- 
ing; and 

the system further comprises a door release ac- 
tuator (30) triggered by the match signal (28). 

60 

5. A system as defined in claim 4, wherein the finger- 
print sensor (16) is integrated into the door for con- 
venience of use. 

55 6. A system as defined in claim 1 , wherein: 

the system provides access to a bank automat- 
ic teller machine (ATM); and 



5 



9 



EP 0 924 655 B1 



the means for inputting a preliminary identifica- 
tion includes a bank card reader (62) integral 
with the ATM; and 

the fingerprint sensor (16) is also integrated in- 
to the ATM. 



10 



chine; and 

the step of reading preliminary identification da- 
ta includes reading an identity card in the ma- 
chine. 



7. 



A method for controlling access to a secured build- 
ing or machine, the method comprising: 

reading preliminary identification data supplied 
by a user (10) seeking access; 
sensing the user's fingerprint prior to granting 
access, and generating a subject fingerprint im- 
age (54); 

retrieving from a fingerprint database (44) ref- 
erence fingerprint data (56) corresponding to 
the preliminary identification data; 
comparing the reference fingerprint data (56) 
with the subject fingerprint image (44) to verify 
the preliminary identification data and, if there 
is match, generating a match signal (58); and 
granting access to the secured building or ma- 
chine if a match signal (58) is generated. 



8. A method as defined in claim 7, wherein: 

the step of reading preliminary identification da- 
ta includes transmitting a polling signal (20) to 
a transponder carried (18) by the user (10), re- 
ceiving the polling signal (20) in the transpond- 
er (18), transmitting from the transponder (18) 
a reply (22) that includes user identification da- 
ta. 

9. A method as defined in claim 7, wherein: 



10 
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30 



35 



each user carries a machine-readable card; 
and 

the step of reading preliminary identification da- 
ta includes reading data from a card reader (32) 40 
in which the machine-readable card is placed 
by the user. 



10. A method as defined in claim 7, wherein: 

the method provides access to a protected 
building; and 

the step of granting access includes unlocking 
a door to the building. 

11. A method as defined in claim 10, wherein the step 
of sensing the user's fingerprint is performed by a 
sensor (1 6) integrated into the door for convenience 
of use. 

12. A method as defined in claim 7, wherein: 

the method provides access to a protected ma- 
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Patentanspruche 

1 . System zum Steuem eines Zugangs zu einem ge- 
sicherten Gebaude oder Maschine, wobei die Vor- 
richtung umfasst: 

eine Einrichtung zum Eingeben einer voriaufi- 
gen Identifikation eines Benutzers (10) des Sy- 
stems, 

eine Fingerabdruckdatenbasis (44), die fur je- 
den Benutzerdes Systems in Zuordnung mit ei- 
ner Identifikation des Benutzers (10) Referenz- 
fingerabdruckdaten enthalt, 
eine Einrichtung zum Wiedereriangen von Re- 
ferenzfingerabdruckdaten (56), die der vorlau- 
figen Identifikation des Benutzers (10)entspre- 
chen, aus der Fingerabdruckdatenbasis (44), 
einen Fingerabdrucksensor (16) zum Erzeu- 
gen eines personlichen Fingerabdrucks des 
Benutzers (10) vor einem Gewahren des Zu- 
gangs, und 

einen Fingerabdruckkorrelator (46) zum Ver- 
gleichen des personlichen Fingerabdruckbil- 
des (54) mit den wiedererlangten Referenzfin- 
gerabdruckdaten (56) und zum Erzeugen eines 
Ubereinstimmungssignals (58), wenn dabei ei- 
ne Obereinstimmung in einem gewunschten 
Genauigkeitsgrad voriiegt, 
wobei das Ubereinstimmungssignal (58) ver- 
wendet wird, urn den Zugang (28) zu der Tur 
oder Maschine zu gewahren. 

2. System nach Anspruch 1, bei dem: 

die Einrichtung zum Eingeben einer vonaufigen 
Identifikation eine Einrichtung zum Auslesen 
eines Identifikationsmediums umfasst, das von 
jedem Benutzer getragen wird und einen 
Transponder aufweist, der in Antwort auf den 
Empfang eines Abfragesignals Identifikations- 
daten ubertragt, und 

die Einrichtung zum Auslesen eines Identifika- 
tionsmediums einen Abfragetransceiver (40) 
zum periodischen Senden von Abfragestgna- 
len und zum Empfangen von Antwortsignalen 
von einem Transponder (18) umfasst, der von 
einem sich dem gesicherten Gebaude oder 
Maschine nahernden Benutzem getragen wird. 

3. System nach Anspruch 1 , bei dem: 

• jeder Benutzer eine maschinenlesbare Karte 
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tragt, und 

die Einrichtung zum Eingeben einer vorlaufigen 
Identifikation ein Kartenlesegerat (32) umfasst, 
das die maschinenlesbare Karte liest, um vor- 
laufige Identifikationsdaten zu erlangen. 

4. System nach Anspruch 1, bei dem: 

das System fur einen Zugang zu einem gesi- 
cherten Gebaude sorgt, und 
das System femer einen von dem Obereinstim- 
mungssignal (28) ausgelosten Turfreigabeak- 
tuator (30) umfasst. 

5. System nach Anspruch 4, bei dem der Fingerab- 
drucksensor (16) zum Benutzungskomfort in die 
Tur integriert ist. 

6. System nach Anspruch 1 T bei dem: 

das System fur einen Zugang zu einer Bank- 
geldautomatenvorrichtung (ATM) sorgt und 
die Einrichtung zum Eingeben einer vorlaufigen 
Identifikation ein baueinheitlich mit dem ATM 
integriertes Bankkartenlesegerat (62) umfasst, 
und 

der Fingerabdrucksensor (16) ebenfalls in die 
ATM integriert ist. 



7. Verfahren zum Steuern des~Zugangs zu einem ge- 
sicherten Gebaude oder Maschine, wobei das Ver- 
fahren umfasst: 

Lesen vorlaufiger, von einem den Zugang er- 
suchenden Benutzer (10) bereitgestellten Iden- 
tifikationsdaten 

Erfassen des Fingerabd rucks des Benutzers 
vor einem Gewahren des Zugangs und Erzeu- 
gen eines personlichen Fingerabdruckbildes 
(54), 

Wiedererlangen von Referenzfingerabdruck- 
daten (56), die den vorlaufigen Identifikations- 
daten entsprechen, aus einer Fingerabdruck- 
datenbasis (44), 

Vergleichen der Referencing erabdruckdaten 
(56) mit dem personlichen Fingerabdruckbild 
(44), um die vorlaufigen Identifikationsdaten zu 
verifizieren, und Erzeugen eines Obereinstim- 
mungssignals (58), wenn dabei eine Oberein- 
stimmung vorliegt, und 

Gewahren des Zugangs zu dem gesicherten 
Gebaude oder Maschine, wenn ein Uberein- 
stimmungssignal (58) erzeugt wird. 

8. Verfahren nach Anspruch 7, bei dem: 

- der Schritt, vorlaufige Identifikationsdaten zu 
lesen, ein Ubermitteln eines Abfragesignals 



(20) zu einem von dem Benutzer (10) getrage- 
nen Transponder (1 8), ein Empfangen des Ab- 
fragesignals (20) in dem Transponder (18), ein 
Ubertragen einer Antwort (22), die Benutzeri- 
5 dentifikationsdaten umfasst, von dem Trans- 

ponder (18) umfasst. 

9. Verfahren nach Anspruch 7, bei dem: 

10 - jeder Benutzer eine maschinenlesbare Karte 
tragt, und 

der Schritt, vorlaufige Identifikationsdaten zu 
lesen, ein Lesen von Daten von einem Karten- 
lesegerat (32) umfasst, in dem die maschinen- 
15 lesbare Karte von dem Benutzer angeordnet 

wird. 

10. Verfahren nach Anspruch 7, bei dem: 

20 - das Verfahren fur einen Zugang zu einem ge- 
schutzten Gebaude sorgt, und 

- der Schritt, den Zugang zu gewahren, ein Ent- 
riegeln einer Tur des Gebaudes umfasst. 

25 11. Verfahren nach Anspruch 10, bei dem der Schritt, 
den Fingerabdoick des Benutzers zu erfassen, mit- 
tels eines zum Benutzungskomfort in die Tur inte- 
grierten Sensors (16) durchgefuhrt wird. 

30 12. Verfahren nach Anspruch 7, bei dem: / 

das Verfahren fur einen Zugang zu einer ge- 
schutzten Maschine sorgt, und 

- der Schritt, vorlaufige Identifikationsdaten zu 
35 lesen, ein Lesen einer Identitatskarte in der Ma- 
schine umfasst. 
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Revendicatipns 

1 . Un systeme pour commander Tacces a un batiment 
ou. une machine a acces controle, I'appareil 
comprenant : 

un moyen pour introduire une identification pre- 
liminaire d'un utilisateur (10) du systeme; 
une base de donnees d'empreintes digitales 
(44) contenant des donnees d'empreinte digi- 
tate de reference pour chaque utilisateur du 
systeme, en association avec une identification 
de Tutilisateur (10), 

des moyens pour extraire de la base de don- 
nees tfempreintes digitales (44) des donnees 
d'empreinte digitale de reference (56) corres- 
pondent a Identification preliminaire de Tutili- 
sateur(10), 

un capteur d'empreintes digitales (16) pour ge- 
nerer une empreinte digitale sujet de I'utilisa- 
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teur (10) avant d'accorder I'acces; et 
un correlateur d'empreintes digitales (46) pour 
comparer I'image de I'empreinte digitale sujet 
(54) avec les donnees d'empreinte digitale de 
reference (56) extraites, et pour generer un si- 5 
gnal de concordance (58) si I y a une concor- 
dance dans les limites d'un degre d'exactitude 
desire; 

dans lequel le signal de concordance (58) est 10 
utilise pour accorder I'acces (28) a la porte ou la 
machine. 

2. Un systeme defini dans la revendication 1, dans 
lequel : is 

les moyens pour introduire une identification 
preliminaire comprennentdes moyens pour lire 
un support d "identification porte parchaque uti- 
lisateur et ayanl un repondeur capable d'emet- 20 
tre des donnees d'identification sous I'effet de 
la reception d'un signal d'interrogation; et 
les moyens pour lire un support d'identification 
comprennent un emetteur-recepteur ^interro- 
gation (40) pour emettre periodiquement des 25 
signaux d'interrogation et recevoir des signaux 
de reponse eventuels provenant d'un repon- 
deur ( 1 8) porte par un utilisateur qui s'approche 
du batiment ou de la machine a acces controle. 

30 

3. Un systeme defini dans la revendication 1, dans 
lequel : 

chaque utilisateur porte une carte lisible par 
une machine; et 35 
les moyens pour introduire une identification 
preliminaire comprennent un lecteur de cartes 
(32) capable de lire la carte lisible par une ma- 
chine, pour extraire des donnees d'identifica- 
tion preliminaires. 40 

4. Un systeme defini dans la revendication 1 , dans 
lequel : 

le systeme donne acces a un batiment a acces 45 
contr6!6; et 

le systeme comprend en outre un actionneur 
d'ouverture de porte (30) declenche par le si- 
gnal de concordance (28). 

60 

5. Un systeme defini dans la revendication 4, dans le- 
quel le capteur d'empreintes digitales (16) est inte- 
gre a la porte pour la commodite d'utilisation. 

6. Un systeme defini dans ia revendication 1, dans 55 
lequel : 

le systeme donne acces a un automate bancai- 



re; et 

les moyens pour introduire une identification 
preliminaire comprennent un lecteur de cartes 
bancaires (62) integre a rautomate; et 
le capteur d'empreintes digitales (16) est ega- 
lement integre dans rautomate. 

7. Un precede pour commander I'acces a un batiment . 
ou une machine a acces controle, le procede com- 
prenant les etapes suivantes : 

on lit des donnees d'identification preliminaire 
foumies par un utilisateur (10) demandant I'ac- 
ces; 

on detecte I'empreinte digitale de I'utilisateur 
avant d'accorder I'acces, et on genere une ima- 
ge d'empreinte digitale sujet (54); 
on extrait d'une base de donnees d'empreintes 
digitales (44) des.donnees d'empreinte digitale 
de reference (56) correspondant aux donnees 
d'identification preliminaire; 
on compare les donnees d'empreinte digitale 
de reference (56) avec I'image d'empreinte di- 
gitale sujet (44) pour verifier les donnees 
d'identification preliminaire et, s'il y a concor- 
dance, on genere un signal de concordance 
(58); et 

on accorde I'acces au batiment ou a la machine 
a acces controle si un signal de concordance 
(58) est genere. 

8. Un procede defini dans la revendication 7, dans 
lequel : 

I'etape de lecture de donnees d'identification 
preliminaire comprend remission d'un signal 
d'interrogation (20) vers un repondeur (18) por- 
te par I'utilisateur (10), la reception du signal 
d'interrogation (20) dans le repondeur (18), et 
remission par le repondeur (1 8) d'une reponse 
(22) qui contient des donnees d'identification 
d'utilisateur. 

9. Un procedS defini dans la revendication 7, dans 
lequel : 

chaque utilisateur porte une carte lisible par 
une machine; et 

I'etape de lecture de donnees d'identification 
preliminaire comprend la lecture de donnees a 
partir d'un lecteur de cartes (32) dans lequel la 
carte lisible par une machine est placee par 
I'utilisateur. 

10. Un procede defini dans la revendication 7, dans 
lequel : 

le procede donne acces a un batiment protege; 
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et . 

I'etape consistant a accorder I'acces comprend 
le deverrouillage d'une porte du batiment. 

1. Un procede defini dans la revendication 10, dans 5 
lequel I'etape de detection de I'emprelnte digitale de 
rutilisateur est accomplie par un capteur (16) inte- 
gre dans la porte pour la commodite d'utilisation. 

2. Un procede defini dans la revendication 7, dans 1° 
lequel : 

le procede donne acces a une machine prote- 
gee; et 

. I'etape de lecture de donnees ^identification 15 
preliminaire comprend la lecture d'une carte 
d'identite dans la machine. 
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